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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) An on-line method of classifying IP addresses into 
related clusters within a distributed information network, the method comprising the steps 
of: 

generating a unified prefix/netmask table from a plurality of network routing table 
prefix/netmask entries, said unified prefix/netmask entries comprising a plurality of IP 
addresses: 

r e c e iving a plurality of IP addr e ss e s; 

processing the plurality of IP addresses according to a radix encoded trie 
classification process to determine a common prefix between at least a portion of the 
plurality of client IP addresses; and 

grouping IP addresses which share a common prefix into a network client cluster.? 

CXllvl 

classifying th e plurality of IP addr e ss e s into r e lat e d clust e rs . 

2. (Previously Presented) The method of claim 1, wherein the plurality of client 
IP addresses are received from one or more network routers. 

3. (Original) The method of claim 1, wherein the IP addresses are network client 
IP addresses. 

4. (Original) The method of claim 1, wherein the distributed information 
network is the World Wide Web. 
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5. (Currently Amended) A method for on-line grouping of a plurality of Web 
client IP addresses into related client clusters, the method comprising the steps of: 

generating a unified prefix/netmask table from a plurality of network routing table 
prefix/netmask entries, e xtracting cli e nt IP addr e sses from each prefix/netmask entry in 
said plurality of network routing table prefix/netmask entries comprising a client IP 
address a coll e ction of IP addr e ss e s : 

performing longest prefix matching on each client IP address; and 
classifying all of the client IP addresses that have the same longest matched prefix 
into a client cluster based on a radix encoded trie matching process. 

6. (Previously Presented) The method of claim 5, wherein the client IP addresses 
are extracted in real time from a network server. 

7. (Previously Presented) The method of claim 5, wherein the distributed 
information network is the Internet. 

8. (Currently Amended) A method for determining the relationships between a 
plurality of IP addresses in a unified prefix/netmask table , the method comprising: 

processing the plurality of IP addresses according to a radix encoding trie (retrie) 
process to determine a common prefix between at least a portion of the plurality of IP 
addresses, said plurality of a IP addresses : and 

grouping all of the IP addresses which share a common longest prefix matching 
into at least one IP grouping. 

9. (Previously Presented) The method of claim 8 , fixrther comprising: 
receiving the plurality of IP addresses from one or more network servers. 

10. (Previously Presented) The method of claim 9, wherein the network servers 
are at least one of proxy servers, cache servers, content distribution servers and mirror 
servers. 
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1 1 . (Previously Presented) The method of claim 8, wherein at least one address 
in said plurality of IP addresses is a client IP address. 

12. (Previously Presented) The method of claim 8, wherein at least one address in 
said plurality of IP addresses is a server IP address. 

13. (Original) The method of claim 8, wherein the retrie includes shift, mask 
values which are combined into a single value in a predecessor table. 

14. (Original) The method of claim 8, wherein the elements in a last retrie table 
level contain only a next hop index so as to decrease the retrie table size. 

15. (Original) The method of claim 8, wherein the retrie includes a fixed number 
of retrie levels. 

16. (Original) The method of claim 8, wherein the number of retrie levels is fixed 
at.two levels. 

17. (Currently Amended) A computer-readable medium containing executable 
instructions which cause a computer to perform the steps of: 

generating a unified prefix/netmask table from a plurality of network routing table 
prcfix/netmask entries, each prefix/netmask entry in said plurality of network routing 
table prefix/netmask entries comprising at least one IP address: 

performing longest prefix matching using a radix encoded trie matching process 
on at least one IP address; and 

classifying said at least one IP addresses that have the same longest matched 
prefix into a client cluster. 
e xtracting at l e ast on e IP addr e ss; 

p e rforming long e st pr e fix matching on th e at l e ast on e IP addr e ss; and 

classifying th e at l e ast on e IP address into a cluster, wh e r e in th e long e st pr e fix 
matching is p e rform e d according to a radix e ncod e d tri e . 



Page 4 of 7 



Appl. No. 09/705,675 



18. (Original) The computer-readable medium of claim 17, wherein the at least 
one IP address is a client IP address. 

19. (Original) The computer-readable medium of claim 17, wherein the at least 
one IP address is a server IP address, wherein the cluster is a server cluster. 

20. (Original) The computer-readable medium of claim 17, wherein the radix 
encoded trie is described by the equation: 

while(! ((r=r— >tablel(x»r— >shift)&r— >mask] )&1) 
where x is the search key and r is the radix encode trie. 
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